Bookmark API calls. Needs fixing?

app/Http/Controllers/BoardController.php

@@ -178,6 +178,81 @@ class BoardController extends Controller {
             ->get();
     }
 
+    public function getBookmarks($uid, Request $request) { // /api/rpc/board/forum/getbookmarks/uid
+        $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+        if ($check == 0) {
+            return '';
+        }
+        else {
+            $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+            if ($valid['for_canview'] == 1) {
+                return DB::table('for_bookmarks')
+                    ->select('*')
+                    ->where('user_id', $uid)
+                    ->get();
+            }
+            else {
+                return 'Permission denied!';
+            }
+        }
+    }
+
+    public function addBookmarks(Request $request) { // /api/rpc/board/forum/addbookmarks
+        $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+        if ($check == 0) {
+            return '';
+        }
+        else {
+            $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+            if ($valid['for_editown'] == 1) {
+                $add = DB::table('for_bookmarks')
+                    ->insert([
+                        'user_id' => $request->user_id,
+                        'for_id' => $request->for_id,
+                        'top_id' => $request->top_id
+                    ]);
+
+                return $add;
+            }
+            else {
+                return 'Permission denied!';
+            }
+        }
+    }
+
+    public function delBookmarks(Request $request) { // /api/rpc/board/forum/delbookmarks
+        $check = $this->objAuth->checkLegit($request->username, $request->password);
+
+        if ($check == 0) {
+            return '';
+        }
+        else {
+            $valid = $this->objAuth->getPermissions($request->username, $request->password);
+
+            if ($valid['for_editown'] == 1) {
+                if ($request->for_id === 0) {
+                    return DB::table('for_bookmarks')
+                        ->where('user_id', $request->user_id)
+                        ->where('top_id', $request->top_id)
+                        ->delete();
+                }
+                else {
+                    return DB::table('for_bookmarks')
+                        ->where('user_id', $request->user_id)
+                        ->where('for_id', $request->for_id)
+                        ->delete();
+                }
+            }
+            else {
+                return 'Permission denied!';
+            }
+        }
+    }
+
     public function addForum(Request $request) { // /api/rpc/board/forum/add
         $check = $this->objAuth->checkLegit($request->username, $request->password);
 

routes/class/board.php

@@ -25,11 +25,13 @@ Route::get('/api/rpc/board/forum/getforum/{id}', 'BoardController@getForum');
 Route::get('/api/rpc/board/forum/getforumname/{id}', 'BoardController@getForumName');
 Route::get('/api/rpc/board/forum/getpostcountfreeze/{id}', 'BoardController@getPostCountFreeze');
 Route::get('/api/rpc/board/forum/getreadonly/{id}', 'BoardController@getReadOnly');
+Route::get('/api/rpc/board/forum/getbookmarks/{id}', 'BoardController@getBookmarks');
 
 Route::post('/api/rpc/board/forum/add', 'BoardController@addForum');
 Route::post('/api/rpc/board/forum/edit', 'BoardController@editForum');
 Route::post('/api/rpc/board/forum/delete', 'BoardController@deleteForum');
-Route::post('/api/rpc/board/forum/bookmark', 'BoardController@bookmarkForum');
+Route::post('/api/rpc/board/forum/addbookmark', 'BoardController@addBookmark');
+Route::post('/api/rpc/board/forum/delbookmark', 'BoardController@delBookmark');
 
 // Topic
 Route::get('/api/rpc/board/topic/gettopics/{for}/{from}/{to}', 'BoardController@getTopics');